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5 The present invention relates to a method of undoing an operafion 

remotely executed on a server station. 

Currently an Increasing number of computers operate in a network 
and use services supplied by other computers. Thus It Is common on a 
commurrication network, for a client station, connected via the network to one or 
1 0 more server stations, to use the services of one of the server stations. 

These services may for example be the remote execution of an 
operation or a function on a computer object stored on the sender station. By 
way of example, the client station can use the services supplied by the server 
station in order to remotely manipulate an image. 
C3 15 These sen/ices can also be the supply of a document by the server 

J^'^ station. 

|3 Generally on a communication network, these serv^fces supplied by 

the server stations are remunerated and invoiced to each client stafionv 

Thus each operation is associated with an execution cost stored on 
20 the server station. On execution of each of these operations, they are invoiced 
hj to the client station on the fly, that is to say progressively with the execution of 

the operations. 

m The invention concems more particularly the undoing of an operation 

remotely executed on a server station. 
25 The undoing of such an operation undoes the effects of a remotely 

executed function. 

In fact, it is not rare for a user to wish to return to an original state for 
an object being manipulated, for example after an inappropriate manipulation of 
the object. 

30 It is also common for a user to proceed by successive steps to 

modify an object such as an image, and to regulariy go back to eliminate certain 
undesirable effecte. 



The software Adobe Photoshop® Is for example known, which 
processes a digital photograph and succassively applies various digital flitere In 
order to find the moet suitable filter. 

This possibility of going back and undoing an operation is 
unanimously approved and is generally Incorporated In ttie majority of software 
packages on the market. 

The object of the present invention is to preserve this undo function 
In a system in which the services supplied by the server stations are 
remunerated and Invoiced to a client station of the network. 

In particular It enables functions to be undone in a collaborative 
environment In whicli several client stations have access to the services of one 
server station. 

To thfs end, the undo method concerned by the invention enables the 
remote undoing of a function requested by a first client station on a computer 
object stored on a server station of a communication network, the execution of 
the function being adapted to manipulate the object from an earlier state to a 
manipulated state. 

According to the Invention, this undo method comprises the following 

steps: 

recefvfng a request to undo the execution of a function; 

- obtaining said earlier state of the manipulated object; and 

- sending a response to the first client station via the 
communication network, said response comprising a sum of electronic money 
less tiian or equal to an execution cost associated with said function. 

The undo method according to the invention enables a client station 
to undo an operation performed previously and to reimburse the client station of 
the network having required this execution of the function with at least a part of 
the costs incurred for the execution. 

Thus the user can be compensated for the coste incurred for the 
remote execution of a function when it is undone. 

Moreover, the sending of the response enables the first client station 
to be informed of the undoing of the function executed earlier at its request. 



Ac?c»rdlng to a preferred feature of the Invention, at the sending step, 
the sum of electronic money is less than or equal to a sum received by the 
server station for the execution of said function. 

Thus the reimbursement amount Is determined from the sum actually 
received by the server station for executing the function, which can include In 
particular possible reductions in the cost of execution of the liinction. 

Aoconding to another advantageous feature of the invention, the sum 
of electronic money is strictly less than the sum received. 

Thus the reimbursement is partial. 

Alttiough a complete reimbursement Is obviously more advantageous 
for the user, there is a risk that the latter may abuse the function of undoing 
operations in such a case. 

A partial reimbursement thus forces the users to utIlizB the function of 
undoing a function more sparingly, whilst enabling them, nevertheless, to 
correct possible manipulation errors. 

According to another preferred feature of the Invention, this undo 
method further comprises a step of calculating an undo cost associated with the 
undo request received, the sum of electronic money being calculated after 
deduction of the undo cost. 

Thus the undo function can itself be charged for, like other functions 
remotely executable on the server station. 

This execution cost of the undo function, or undo cost, is thus 
deducted from the amount to be reimbursed. 

According to a another preferred feature of the invention, the undo 
method further comprises a step of generating electronic money on said server 
station, associated with said first client station. 

Thus the server station generates its own electronic money for 
relmbur^ng the client station having required the execution of the undone 
function. 

In practice, when each executed operation is remunerated by means 
of electronic money generated by the client station, it is not possible to undo this 
payment by returning the money received. 



This is because there is no guarantee for the client station that the 
server station will not i<eep a copy of the electronic money coins relmbureed 
with a view to fraudulent use. 

Generating electronic money peculiar to the reimbursement resolves 
this problem. 

According to a preferred feature of the invention, the undo method 
comprises a step of receiving a request to undo the execution of a function, sent 
by a second client station of the communication network, this undo request 
comprising a sum of efeotronic money, and a step of sending a second 
response to the second dient station via the communication network, the 
second response comprising a sum of electronic money less than or equal to 
the sum of electronic money included in the undo request. 

For each undo request of a function, it is possible to identify the client 
station having requested the eariier execution of the function such that the sum 
of electronic money corresponding to the at least partial reimbursement of the 
execution cost is in fact sent to the client station having required the execution 
of the function. 

Thus, when the client station requiring the undoing of a function Is 
different to ttie client station having required its execution, the server station 
sends two responses : a first response to the first client station having required 
the execution of the function, fn which a reimbursement amount is included, and 
a second response to the second client station* having required the undoing of 
the function. 

This second response may comprise a sum of electronic money 
equal to the sum of electronic money included In the undo request in which 
case the undoing of the function costs nothing to the second client station, it 
may also be stricMy less ttian the sum of electronic money included in the undo 
request, in which case a certain undo cost is borne by the second client station 
of the communication network. 

In practice, the undo method comprises a step of calculating an undo 
cost associated with the undo request received by the second client station of 
the communicafon network, and, at the step of sending the second response, 
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the sum of electronic money is calculated by dividing said undo cost by the sum 
of electronic money included in the undo request. 

Thus, the undo cost is also borne by the user requesting the undoing 
of the execution of a function. This malces it possible to avoid a user of a 
5 communication network too often undoing functions carried out earlier by other 
users of the communlcafion network. 

In practice, an undo cost can be invoiced both to the first client 
station, having required and paid for the execution of the function, and to the 
second client station, having required the undoing of the function. It is thus 
10 possible to share the costs of undo's t>etween the different users of the 
communication network. 

In a complementary manner the present invention also relates to a 
device for undoing a function requested by a first client station on a computer 
abject stored on a server station of a communication network, the execution of 
15 the function being adapted to manipulate said object from an earlier state to a 
manipulated state. 

This undo device comprises: 

means for receiving a request to undo the execution of a 

function; 

20 - means for obtaining said earlier state of the manipulated object; 

and 

means for sending a response to said first client station via the 
communication network, said response comprising a sum of money less than or 
equal to an execution cost associated with said function. 
25 This device for undoing an operation, incorporated in a server 

station, has features and advantages similar to those described above for the 
method of undoing an operation on a server station. 

The present invention also concerns a server station adapted to 
implement the method of undoing an operation in accordance with the 
30 invention. 

It also concerns a computer and a communication network adapted 
to implement the method of undoing an operation according to the invention. 
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Finally, the present invention relates to a computer prc>gram which 
can be read by a microprocessor, comprising portions of software code adapted 
to implement the mefihod of undoing an operation according to the invention 
when the computer program is loaded onto a microprocessor. 
5 Thfe communication network, this computer, this server station and 

the computer program have features and advantages similar to those described 
above. 

Still other particular features and advantages of the Invention will 
appear in the following description 
'^0 In the accompanying drawings, given by way of non-limiting example: 

- Figure 1 is a block diagram illustrating a client station and a server 
Station in a communication network adapted to implement the method of 
undoing an operation according to the invention; 

C - Figure 2 is a block diagram illustrating a computer adapted to 

13 15 implement the invention; 

^2 - Figure 3 is an algorithm illustrating the method of undoing an 

fa operation implemented on a server station according to one embodiment of the 

invention; 

s ' Figure 4 is an algorithm detailing the procedure for calculating an 

O 20 undo cost used In Figure 3; 

ify - Figure 5 is an algorithm detailing the procedure Ibr calculating an 

f U amount to be reimbursed used in Figure 3; 

?y - Figure 6 Is an algorithm detailing the procedure for sending a 

reimbursement used in Figure 3^ 
25 - Figure 7 Is an algorithm detailing the procedure for obtaining a 

sum of money used in Figure 6; 

- Figure 8 Is an algorithm illustrating a method of remote undoing of 
an operation implemented on a client station: 

- Figure 9 is an algorithm detailing the procedure for obtaining a 
30 cost of executing an operation used in Figure 8; and 

- Figure 10 is an algorithm rllusfrating a procedure for processing a 
bill of exchange used on a client station. 



A description wilt first of all be given, with reference to Figure 1, of a 
communication network adapted to implement the method of undoing an 
operation according to the invention. 

In what follows, a client station U connected to a server station H will 
be considered* Naturally, in a communication network, the different computers 
in the network can in turn be client station U or server station H. 

Furthermore, in a communication network, several client stations are 
in reality connected to each server station H. 

In friis example, the client station U can use the services of the 
server station H. In particular, the client station U can request the executton of 
an operation directly on the server station H. 

Each operation corresponds to a series of Instruc^ons of a computer 

program. 

Naturally, the client station U could also request other services from 
the server station H, for example the supply of a document. 

By way of example that is in no way limiting, the server station can 
store digital images, and a user can, through the client station U, perfomi 
operations on one of the images of the server station H. 

The operations may be the conversion of an image into black and 
white, the rotation of the image or a reflection with respect to a horizontal or 
vertical axis of the Image. 

When such an operation is remotely executed, the image will 
continue to be stored on the server station H and will not pass over the 
communication network. The client station will merely send a request for remote 
execution of the operation to the server station. 

in the remainder of the description, a distributed object system will be 
considered. A computer object is an element comprising data, also refen-ed to 
as attributes, and functions or methods possibly using input arguments. In such 
a system, the functions can be invoked in order to manipulate the data of the 
object. 

The interface of an object is constituted by all the functions 
applicable to the object as well as attributes. 



8 



In pracUce, the client station U comprises execution and payment 
request means 10 for execifting a remote function f on an object o stored on the 
server station H. 

These means do not need to be described in detail here for the 
5 remainder of the disclosure of the invention. 

For implementing the Invention, the client station U comprises means 
11 of sending a request to undo a function f previously executed on the sen/er 
station IH. 

As will be clearly described below, this function f to be undone may 
10 have been executed at the request of any client station of the communication 
network. 

It also has means 12 of receiving a reimbursement amount sent back 
by a server station H. 

Means 13 ibr validating and levying the sum received enable 
1 5 validation of the reimbursement amount sent back by the sen/er station H. 

In particular, storage means 14 make it possible to store bills of 
exchange for authenticating the reimbursement amount received. 

The Implementation of these different means will be explained in 
detail with reference to Figures 6 to 8. 
20 In a complementary manner, the server statiqn H comprises 

execution and remuneration means 20 for executing functions following the 
reception of an execution request sent by a client station U. 

These execution and payment means 20 cooperate with the 
execution and payment request means 10 of the client station U so as to 
25 execute and invoice each function f on a computer object o. 

These execution and payment means 20 cooperate with storage 
means 29 making it possible to store the identity of each client station Up of the 
communication network In association with each function f executed at the 
request of that client station Up. 
30 It also comprises means 21 for receiving a request to undo a function 

f and means 22 for undoing this function f which make it possible to return to a 
state of the object o preceding the execution of this function f. 
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In this embodiment, storage means 23 enable ttie sum received Cf by 
the server station H to be stored for the e:^ution of eatsi funcifaon f. These 
storage means 23 cooperate with calculation means 24, making it possible to 
read and calculate the reimbursement amount. 

These obtaining means 24 further comprise modes for calculating an 
undo cost and means for comparing the number of undo requests received, 
stored in an undo table 28. with a predetemiined threshold value. 

Obtaining means 25 make it possible to obtain a sum of money S 
corresponding to the reimbursement amount 

These obtaining means 25 cooperate vwth coin storage means 26 so 
as to take a sufficient number of coins, at least equal to the reimbursement 
amount associated with the function to be undone. 

Sending means 27 enable the reimbursement amount to be sent to 
each client station. 

With reference to Figure 3 and the subsequent Figures, the operation 
will be explained below of a!i these means which make it possible to reimburse 
a client station when the execution of a function f is undone. 

All these means 10-14 and 20-29 can be incorporated either at the 
client station U or at the server station H in a computer as shown in Figure 2. 

This computer comprises, in a typical manner, a microprocessor 30, 
a read only memory 31 (ROM) and a random access memory 32 (RAM) 
comprising different registers for implementing the method according to the 
invention. 

The computer comprises in particular a communication Interface 39 
which can be connected to a communication network 3 for receiving or 
transferring requests or Information. 

In addition, the computer comprises document storage means, such 
as a hard disk 36, or is adapted to cooper^, by means of a disk drive 37, with 
removable storage means 38 such as diskettes, compact discs or computer 
cards (PC cards). 
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These fixed or removable storage means can contain the code of the 
execution method of operations according to the invention which, once read by 
the microprocessor 30, will be stored on the hard disk 36. 

As a variant the program enabling the device to Implement the 
invention can be stored in the read only memory 31 . 

As a second variant, the program can be received for storage as 
described previously via the communication network 3. 

In a typical manner, the computer also has a screen 33 serving, for 
example, as an interface with an operator using a keyboard 34 or a mouse 35 
or any other means. 

The central processing unit or microprocessor 30 (CPU) will execute 
instructions relating to the imptementation of the invention. 

On powering up, the programs and methods relating to the invention, 
stored in a non-volatile memory, for example the read only memory 31. are 
transferred into the random access memory 32, which will ttien contain the 
executable code of the invention as well as the variables necessary for 
Implementing the invention. 

Thus the random access memory 32 incorporated into a client station 
In a communication network will comprise registers 14 for storing in particular 
the bills of exchange delivered by each server station H. 

Likewise, the random access memory 32 incorporated in a server 
station of a communication network win comprise registers for storing at least 
one table of coins 26, and the amount received 23 for executing each function, 
the Identity 29 of the client station associated with the execution of each 
function and an undo table 28. 

A communication bus 40 affords communication between the 
different sub-elements of the computer or connected to it 

The representation of the bus is not limiting and in particular the 
microprocessor Is liable to communicate instructions to any sub-element directly 
or by means of another sub-element. 
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A description wiO now be given, w'rth reference to Figure 3, of the 
method of undoing an operation as implemented on the server station H of the 
communication netwvork. according to a prefenred emliodiment of the invention. 

The mefliod of undoing an operation comprises firet of . ail a step S1 
Of receiving a request ft>r undoing the execution of an operation. 

This undo request is sent by a first ciient station Ua of the 
communication networlc. 

it should be recalled here that each computer object o is written in a 
programming language used by the computer application peculiar to the 
computer which stores o and that it is consequently necessary to use a 
communication language common to the communication network in order to 
share the computer objects and in particular to remotely involve functions on 
these objects o. 

On the Internet, it is possible to use a communication language such 
as XML ("extended Markup Language"). 

The use of this communication language, making it possible to 
describe computer objects on the network and to remotely invoke functions on 
these objects, is described in detail In European patent application 00 401 754.7 
filed by Canon Research Centre France S.A. 

A description of the different data fields which it is necessary to 
translate into the communication language of the network in order to make it 
possible to remotely invoke functions on ttiese objects o is given below. 

Reld: Interfaces 

This field makes it possible to send several interfaces to remote 
applications. 

<lnterfaces> 

<interface>. . .</interfaoe> 

</interfaces> 
Reld: interface 

This field con^ponds to tiie generic concept of an object class, as 
defined in the JAVA or C++ languages. 
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An interface describes the operations or functions supported by a 
computer object o. 

Tiiese operations generally use input anguments and possibly supply 

a result 

5 An interface also describes the attributes or data field which all the 

objects supporting this Interfiace contain when they are translated into the 
cornmunlcatlon language. 

An interface can also contain a reference to other interfaces, whether 
they extend to these other interfaces or supply only a shortcut for using these 
1 0 other interfaces. The object then supports all these other referenced interfaces . 
Field: attribute 

This field comprises a list of ttie attributes which an object supporting 
the interface contains when it is translated into the communication language. 
Field: functions 

JS 15 This field contains a list of the furtctions or operations associated with 

in the computer object supporting this interface. 

it Ji. 

K <functions> 

rU <function>, ..</function> 

ru 

O 20 </functlons> 
Field: function 

lU This field corresponds to the generic concept of function. A function 

is identified by its signature, for example a name, the type of input argument 
used and me type of object obtained during the execution of this function. 
25 Field: arguments 

This field contains a list of the input arguments which a function 
requires for its implementation. 
<arguments> 

<arg>-..</arg> 



30 



</argument5> 
Field: argument 
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This fie[d corresponds to an input argument of a fisnction and can for 
example be a literal object or a complex object. 

The function field thus makes it possible to invoice a function on a 
remote object. The ^rget object o and the Input arguments of the function must 
5 be specified as descrit>ed above. 

According to the invention, the function field can make It possible to 
invoke the function "undo" on a remote object o. 

The name of the function to be undone is included In the argument 
fieW of the function "undo", 
10 An extraction step S2 also makes it possible to extract the identity of 

an operation which is here a function f executed on an object o. 

A test step S3 makes it possible to verily whether this function f has 
already been executed on the object o on the server station H following an 
execution request sent by a client station U of the communication network, 
g 15 If not, in a sending step S9 frie server station H sends back to the 

1^ client station Ua a response indicating that it is impossible to undo an operation 

f not executed. 

If the operation f has already been executed, the list of funcfions to 
f U i:>e undone is obtained in an obtaining step S4. 

20 indeed, If this function f is not the last functk>n executed on the object 

U' o on the server station, the obtaining step S4 makes It possible to obtain the list 

^ of operations ^cecuted after the execution f of this operation f to be undone. 

Q Naturally, if the function f to be undone is the last function to 

executed, this list is restricted to this sole fiinction f. 
25 An obtaining step S5 Is implemented In order to obtain the identity of 

the client station Ua» generally Incorporated in the request to undo the execution 
of an operation. 

An obtaining step S6 is next implemented tn order to obtain an undo 

cost Ca. 

30 In factr as described later, the amount of the reimbursement made on 

the undoing of a function is calculated from an amount received and preferably 
takes into account an undo cost Ca. 
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This is because a complete reimbursement oorresponding to the 
amount actuaiiy received for the execution of the functron is more advantageous 
for each user of the communication network, but there is a risic that the server 
station H may be overcharged. 
5 With the operations undone costing the users nothing* this may give 

rise to abuse by the users. On the other hand, a partial reimbursement forces 
the users to be more sparing in the utilization of the undo function whilst 
enabling tfiem, nevertheless, to correct possible manipulation errors. 

Thus, in other words, the undo function is itsetf be charged for, like 
1 0 other functions remotely exeojtabie on the server station H. 

An undo cost Ca associated with each undo request can thus be 
calculated. 

A calculation example will be desired below with reference to Figure 

H 4, 

15 Preferably the server station wiif apply a sliding scale so that each 

If! new undo will be a little less reimbursed than the previous one* 

In practice, the undo cost Ca will be increased with each new undo 

•I- "5? 

IU request received by the server station H and sent out by a same client station 

Ua of the communication network. 
13 20 Preferably also this sliding scale will not be applied immediately. 

Each dient station U will benefit from a certain undo "credir so that the undo 

FlJ 

fy cost will be zero if the number of undo requests n sent by ttie client station U 

P remains below a predetermined threshold value T, 

The procedure for calculating the undo cost Ca will be described In 
25 an example embodiment witfi reference to Figure 4. 

An initialization step S401 first of all makes it possible to initialize the 
undo cost Ca to zero. 

Next, an obtaining step S402 enables the identity to be obtained of 
the client station U which sent a request for undoing a function. 
30 A test step S403 enables it to be verified whether this client station U 

is known to the server station S. 



If not, an adding step S404 makes it possible to store the identity of 
tiiis client station u in an undo table 28 In association with tfie number n of undo 
requests sent out by this client station U, here Initialized with the value 0. 

After the adding step S404 or directly after the test step S403, a 
reading step S405 makes it possible to read from the undo table 28 if the client 
station U is known, the number of undo's n carried out previously for the client 
station U. 

An obtaining step S406 makes it possible to obtain the function F to 
undo requested by the client station U. 

It Is then checked, In a test step S407, whether the number of undo's 
n is greater than or equal to a predetemiined threshold value T, for example 
equal to 20. 

if not, that is to say if the number of undo's n sent out by the client 
station U remains strictly less than this threshold value T, a step S411 of 
updating the number of undo's is implemented such that the number n of undo's 
Is incremented by one unit 

Otherwise, if at the end of the test step S407 the number of undo's n 
is greater than or equal to the threshold value T, an obtaining step S408 makes 
It possible to obtain from the storage means 23 the amount received Cf for the 
execution of the function F to be undone. 

A calculation step S409 next enables the unit cost C to be calculated 
for this funcSon F to be undone. 

In practice, ttiis undo cost C represents a fraction of the amount 
received Cf. 

Here, by way of non-llmiting example, the undo cost C is calculated 
by the foiiovtnng formula: 

9 

The value of the undo cost C may thus vary between O and Cf x t. 
The parameter t thus represents the maximum reimbursable rate of the 
execution cost received for the execution of the function to be undone. 

The greater the parameter D, the more the undo cost C varies slowly. 
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In fact, when n - T = D, the undo cost C Is equal to half the maximum 
reimbursement value Cf x t 

A step S410 of updating the value of the undo cost Ca is next 
implemented such that: 
5 Ca = Ca C 

TTie unit undo cost associated with the undoing of the func^on F is 
thus added to the overall undo cost Ca. 

The updating step S41 1 already described is next implemented such 
that the number of undo's n is incremented by one unit. 
10 A test step S412 enables it to be verified If another function must be 

undone in the list of functions obtained earlier at the obtaining step S4 

This is because the undoing of a function may necessitate, as 
already described, the undoing of other functions executed later ttian the 
1^ function F to be undone, 

15 If this Is the case, the next function F to be undone is obtained In an 

in obtaining step S413, and for this function all of steps S407 to S412 described 

!^ previously are reiterated. 

fy When all the functions to be undone have been processed, and that 

eac^ unit cost C associated with each function F has thus been calculated and 

Q 20 all of them added togefrrer, an update step S414 enables the undo table 28 to 
be updated with the number of undo's n associated with the client station U 

m having required the undoing of a function. 

|3 A response step S415 enables the value calculated for the undo cost 

Ca to be addressed for the continuation of the undo method as shown in Figure 
25 3. 

Retuming to Figure 3. an extraction step S7 is next implemented in 
order to extract a payment Pa included in the undo request sent out by the client 
station Ua. 

This is because, as already described, the undo function is preferably 
30 a function that is charged for. at least as from a certain number of undo's 
requested by the client station, suc^ that a payment Pa must be included in the 
undo request for the execution of that undo. 



17 



This payment may be made by the introduction of a sum of electronic 
money in the undo request. 

A test step S8 enables the value of the undo cost Ca obtained at step 
S6 to be compared to the payment value Pa extracted at step S7. 
5 If the payment value Pa is strictly less than ttie undo cost Ca, an error 

message is sent back In a response step S9 in order to indicate to the client 
station Ua that it is impassible to meet tfie request to undo the function F. 

Othenvise, when the undo cost Ca is less than or equal to the 
payment value Pa, ttie following steps S10 to S27 are implemented In order to 
10 determine the amount of the reimbursements to be made and the client stations 
U of the communication network to be reimbursed and in order to perform the 
actual undoing of the functions identified a step S4» 

When undoing a function F on the server station H, it is fair to 
ij» reimburse the client station having rojuired Itie execution of that function and 

J2 15 thus paid for its execution. 

~n in practice, an initialization step S10 makes it possible to initialize a 

reimbursement table R. 

This reimbursement table R makes it possible to assodate with each 
client station U of the network, a sum S corresponding to a reimbursement 
f^. 20 amount to be returned to that client station U, 

An updating step S1 1 makes it possible to add to the reimbursement 
table R first of all the sum to reimburse to the first client station Ua having 
required the undoing of a function. 

In practice, the identity of the station Ua is stored and a sum S - Pa - 
25 Ca thus corresponding to the payment Pa received from the client station Ua 
from which is deducted the undo cost Ca calculated earlier. 

A selection step S12 next enables the last function executed to be 
selected from the list oi^tained at the obtaining step S4. 

in a test step SI 3 it is ohecl^ed whether this function is reversible, 
30 that is to say whether there exists an opposite function making it possible to 
retum to a previous state on the object o. 



ru 

•iicsr 



18 



An example of a reversible function would be, during the 
manipulation of an Image, a rotation of the image by a quarter of a turn to the 
right, the reverse function of which is the rotation of the image by a quarter of a 
turn to the left, a reflection with respect to an axis, the opposite function of 
5 which is the function itself, and/or a function of enlariging by a predetermined 
ratio, the opposite iunctfon of which is the function of reducing the image by the 
same ratio. 

Where this function Is reversible, its opposite function is obtained in 
an obtaining step S14 and then. In a step S15, this opposite fijnction is applied 
10 to the object o to be manipulated. 

Otfierwise, If the function is not reversible, the pre^ous state which 
was stored during the execution of the function to be undone is obtained in an 
obtaining step SI 6, and this previous slate is applied in a step S17. 

In fact It is thus necessary to store the state of the system before 
15 each execution of each function and to return to this prior state on undoing. 

Such Is the case in particular for functions enabling an image to be 
transformed into black and white, to apply filters for the purpose of blurring or 
else for accentuating the details of an image. 

For example^ the software PhotoShop® keeps in memory each 
20 successive version of an image to enable any of the operations performed to be 
undone. 

These two mechanisms of undoing an operation are well known to 
persons skilled in the art and will not be described in any further detail here. 

In an obtaining step S1B ^e identity is next ot>tained of the client 
25 station Up having required, and thus paid for. the execution of the functton 
undone earlier. 

A calculation step SI 9, detailed in Figure 5, enables the calculation 
to be made of an amount M to be reimbursed to this client station Up for the 
undoing of this function. 
30 This procedure for cafculating the amount M to be reimbursed will be 

described in an example embodiment with reference to Figure 5, 
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An obtaining step S501 makes it possible to obtain the identity of the 
client station U which executed and paid for the function to be undone. 

A test step S502 enables it to be verified whether this client station U 
is known to the server station S. 
5 If not, an adding step S503 makes It possible to store this client 

station U in an undo table 28 in assodafion with the number m of requests to 
execute functions which are then undone, sent out by this client station U, This 
number m is initialized here with the value 0. 

After the adding step S503, or directly after ttie test step S502 if the 
10 client station U is known, a reading step S504 makes It possible to read from 
the undo table 28 the number m of executions of functions then undone that 
were carried out previously by the client station U. 

A reading step S505 makes it possible to read in the storage means 
1^, 23 the amount Cf received on execution of the ftjnction. 

]i 15 In fact, for each function, an execution cost c is associated and 

IM generally stored in the interface of the ol3|iect o. 

However, the amount Cf actually received by the server station H 
fU may be less lhan this execution cost c, in particular when the server station 

applies discounts. 

p 20 The reimbursement amount M will therefore always be less than or 

equal to the execution cost c associated with the function, and In particular less 
fU than or equal to the amount actually received Cf when this function is executed 

-3 by the server station. 

ru ■ 

It is then checked, in a test step S506, whether the number m of 
25 executions of undone functions is greater than or equal to a predeteimined 
threshold value T, for example equal to 20. 

If not, that is to say If the number m of executions of undone 
functions sent out by the client station U is strictly less than this threshold value 
T, step S509 of calculating the amount M to reimburse is implemented such that 
30 the amount M = Cf. 

Thus, so long as the number m of executions of undone functions 
remains less than the threshold value T, the amount reimbursed to the client 
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station U corresponds exactly to the amount Cf invoiced on execution of the 
function to be undone. 

A step S510 of updating the number m is next implemented such that 
the numi>er m of executions of functions then undone is incremented by one 
5 unit 

Otherwise, if, at the end of the test step S506, the number m of 
executions of undone functions Is greater than or equal to the threshold value T, 
a step S507 of calculating an undo cost C is implemented as previously. 

By way of non-Mmfting example, the undo cost C is calculated by the 
10 following formuia: 



As previously, ttie value of the undo cost C may vary between 0 and 
Cf X tR, where tn is a maximum rate of reimbursement which is a function of the 
^ amount Cf actually received on execution of the function, 

in 15 An association step S508 next enables the reimbursement amount M 

to be calculated such that: 
f y IVl = Cf - C 

An undo cost C, which depends on the number m of executions of 
O undone functions required by the client station U, is thus deducted from the 

ff; 20 amount Cf actually received, 

in The reimbursement amount M will thus be strictly less than the 

C3 amount actually received Cf on execution of the function. 

The step S510 updating the number m of executions of undone 
functions is also implemented after the calculation step S508 so as to increment 
25 this number m by one unit. 

From tills new value m the undo table 28 is next updated in an 
updating step S511 then the procedure for calojiation of reimbursement M is 
terminated and the calculated value M is addressed for the continuation of the 
Implementation of the undo method as shown In Figure 3. 
30 Next the reimbursement table R is updated. 
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In practice, it is verified whether the client Up. which paid for the 
execution of the function and for whom the amount M to be reimbursed has just 
been calculated, is Known and already stored in the reimbursement table R. 

if not an adding step S21 enables the identity of this client station Up 
5 to be stored In the reimbursement table R in association with a sum S to be 
reimbursed, here initialized to 0. 

A reading step S22 next makes it possible to read the sum Sp 
associated with the Station Up to be reimbursed based on the value stored in 
the reimbursement table R. 
10 This reading step S22 is implemented directly at the end of the test 

step S20 when the client station Uf> Is already stored In the reimbursement table 
R. 

The sum Sp to reimburse to this dtsnt station Up Is next updated in a 
M calculation step S23 In which: 

S 15 Sp = Sp + M 

III The reimbursement amount M calculated prior to the calculation step 

J J S19 is thus added to the overall amount to reimburse to the station Up, 

ly An updating step S24 next makes it possible to store this new value 

f U of the amount to reimburse Sp in the reimbursement table R in association with 

20 the identity of the client station Up. 
1;^ A test step S25 enables it to be checl^d whether the list of functions 

ITt to be undone is used up. 

Q If not, in a selection step S26, the previous function is selected from 

this list and for this function ail of steps 812 to S25 described previously are 
25 reiterated. 

Thus for each function to be undone tliere is calculated the 
reimbursement amount M in association with the client station U having paid for 
the execution of this funcSon to be undone. 

When the list of functions to be undone is used up, at the end of the 
30 test step S25, a sending step S27 enables the actual sending to be made of the 
reimbursements to each client station of the communication network, based on 
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the identity of these client stations and the associated reimbursement values S 
stored in the reimbursement table R. 

In practice, as shown in Figure 6, to send ttie reimbursements, 
several response messages are generated which are addressed to the client 
5 stations of the communication network. 

In an obtaining step S601 , a first line of the table R Is read, that is to 
say the identity of a client station U and a sum to be reimbursed S calculated 
earlier. 

A response message A is next generated in a step S602 destined for 
1 0 the client station U. 

An obtaining step S603 is then implemented in order to obtain a sum 
S corresponding to the total sum to be reimbursed. 

This step is described in detail In Figure 7. 

Generally during this step, electronic money is generated on the 
^ 15 server station H, this electronic money being associated with the client station U 
l^n to be reimbursed and the amount of eiectronio money generated being greater 

than or equal to the sum to be reimbursed S. 

In practice, the server station generates a chain of coins for each 
lU client station, this chain of coins being used for the consecutive reimbursements 

1^ 20 of the different operations undone by this client station. 

fn order to obtain this sum of money s, it is necessary to generate 
ifi electronic money on the server station H in order to create a series of coins 

£3 which can tl^ien be spent on the communication network in onder to reimburse 
^ the client station U. 

25 By way of example use may be made of a system for generating this 

electronic money taiown as PayWord provided by Rivest and Shamir. 

A description of this system can be ccKisulted at the Internet address 
http://theoryJcs.mit.edu/-rivest/RivestShamir-mpay.ps. 

TYits system generally consists of generating a series of numbers by 
30 means of a hash function, using a random number Wn. 
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This PayWord system has the advantage of being reliable and not 
requiring the approval of a third party body {Isanic, notary, etc) to validate each 
individual payment 

In practice, it is checked, in a test step S70. whether the client station 
5 U is known to the server station H. If not, the server station draws a number at 
random in a random dra\Mng step S73. Let the random number be Wn. 

There is next applied, in a coining step S74« recursively, a known 
ha^ function such as: 

W„-i-h(Wn) 

10 This hash function h has the particularity of not being reversible, so 

that it is fmpossfble. from a number Wn - 1, to find the previous number Wn. 

In this way a series of coins Wn, Wn-i, - ^N^, Wi, Wo is obtained. 
The end Wo of the chain of numbers ttius obtained is known as the 
root coin and makes It possible to verify the authenticity of the different coins. 
I 15 This PayWord system advantageously makes it possible to verify the 

authenticity of the coins simply by applying the hash function. 

When such electronrc money is generated, it is necessary for the 
I server station H to obtain a bank certificate in order to prove its Identity. 

Two certificates are used: 
I 20 - a bank certificate C{PK^), issued by a bank in response to a 

^ request from the server station: and 

1 - a hiW of exchange C(Wq) generated directly by the server station 

i H. 

The bank certificate C(PKe) is an assurance for each user that the 
25 bank will honor any request Ibr redemption of authentic coins. The bill of 
exchange C(Wo) is an assurance for each user that the coins produced by the 
server station are indeed authentic and will be honored by ttie bank. 

in practice, the server station sends to a banking organization the 
number of its credit card and its public key PKc. 
30 The banldng organization returns a bank certificate C(PKe) which 

contains the identity of the banking organization, the identity of the server 
station and the public key of the server station PK©. This certificate also includes 
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an electronic signature authenticating the information which it contains, this 
signature being made by the bank using its private key SKt- 

Once the different coins Wo, Wi, Wn have been generated, these 
coins are stored in a storage step S75 in the table of coins 26 as illustrated in 
5 Figure 1 in association with an identifier of the dient station U and an index i, 
initiaii2Bd with the value 0, corresponding to the index of the last coin used in 
the table of coins 26. 

In addition, using the bank certificate C(PKe) obtained from the bank, 
the sen/er station H generates, in a bill of exchange creation step S76, a 
1 0 certificate or bill of exchange intended for the client station U. 

Each bill of exchange contains the bank certifEcate C(PKq} previously 
received, the identity of the client U for which if te intended, and the root coin 
Wo- This bill of exchange also Includes an electronic signature authenticating 
the information which It contains, this signature being made by the server 
15 station using its private key SKa, 

After this step S76 of creating a bill of exchange, this bill of exchange 
is sent to the client station U in a sending step S777. 

The bills of exchange and the coins are specific to a given user, 

Finally, the client station U receives, by means of the certificate 
20 C(PKe). the followtng information: the Identity of the banking organization and of 
the server station, the public key of the server station PKe, and the root coin Wo. 

It win be recalled that the public key of the server station PKe is 
contained In the bank cerQftcate C(PKe). The authenticity of this key can 
therefore be established by comparing the value obtained by decoding the 
25 signature on this certiricate by means of the bank public key PKb, with the initial 
information contained in this certificate (excluding the signature). 

Moreover, It will be recalled that the coin Wo is contelned in the bill of 
exchange from the sen/er station C(Wo). The authenticity of this coin can 
therefore be established by comparing the value obtained by decoding the 
30 signature on the certificate by means of the public key PK© previously 
authenticated, with the initial information contained in this certificate (excluding 
the signature). 
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Thus, by means of a double signature, each client is capable of 
verifying that he Is indeed in possession of a root coin Wo issued by a server, 
known to the t>ank» and authorized by the latter to issue electronic money coins. 

If at the end of the test step S70 the client station U is already known, 
5 it is checked in a test step S71 whether the table of coins 26 contains sufRdent 
coins which can be used by this server station H for reimbursing the 
reimbursement sum S to the client station U. 

if not, an elimination step S72 erases the coins remaining in the table 
of coins 26 and the previously descrllDed steps S73 to S77 are implemented in 
10 order to generate new coins which can be used by the server station H for 
reimbursing the client station U. 

Thus the table of coins 26 is automatfcaily filied as soon as it no 
longer contains sufficient electronic money to reimburse the client station U. 
1,1, "me number of coins generated by the server station H may possibly 

S 15 depend on the frequency of use of this server station H by the client station U. 

This number of coins can also be constant and determined once and 



Hi 

•sir f 

fi 



for all. 

jn It should be noted that it is preferable to generate a large number of 

rU coins during the coining step S74 and to store them In the table of coins 26 for 

20 subsequent use, that is to say when several functions executed by the client 

i « station U are undone by Itself or by another client station of the communication 

rii 

network. 

The coins generated each have a length, for example, of 32 bytes. 
The index of tine coin in the series of coins generated can be encoded in 16 bits, 
25 which makes it possible to generate 2^^ coins. 

Returning to Figure 6, the server station H implements a reading step 
S604 for reading in the table of coins 26 the index of the last coin used. 

For a reimbursement sum S, and assuming that each coin Wi 
corresponds to a unit fraction of this sum S, S coins are taken from the table of 
30 coins 26, 

Here, the sum of money S reimbursed for the undoing of the function 
f is entered directly in the response sent to Itie diant station U. 
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In practice, the value (Wi+ s , i + S) Is entered in the response. 
Naturally, at the reimbursement step, each calculated reimbursement 
amount M or the overall reimbursement sum S could be credited to an account 
associated with the client station U« and then be used for remunerating the 
S execution of functions subsequentiy. 

After this entering step 3605, a storage step S606 makes it possible 
to store the new index i + S corresponding to the last coin used in the table of 
coins 26 for the client station U. 

Thus the response A transmitted by the server station H during the 
10 sending step S607 contains the sum of money S corresponding to the undoing 
of the function requested. 

Next it is verified in a test step S608 whether there exists another line 
in the reimbursement table R, that fs to say another client station U to be 
H reimbursed with a sum of money S. 

U 15 If so, all the steps S601 to S607 described earlier are reiterated, 

in When all the tines of the reimbursement table R have been dealt 

C witti, the reimbursement procedure Is terminated. Thus a response message A 
fU IS sent both to the first client station Ua of liie communication networl^ having 

' required the undoing of a function and to one or more other client stations of the 

O 20 communication network which have already executed and paid for the function 
!f; or functions to be undone. 

ry Naturally, when the first client station Ua requires the undoing of a 

O function which It required and paid for the execution itself, it receives by way of 

ru . 

reimbursement the amount actually received on execution of that function from 
25 which there may possibly be deducted an undo cost C^. 

In parallel to the implementation of this method of undoing operations 
on the server station H, a method of requesting remote undoing of a function Is 
implemented on the client station Ua, as illustrated in Figure 8. 

This method of requesting remote undoing of a flinction comprises 
30 first of ail a step S801 of generating a request for remote undoing of a function. 

This undo request Includes a payment Pa, which may use the 
payment system Payword already described* 
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The request for remote undoing of ^ functjon on an object o Is then 
sent in a sending step S802 by the client station U to the server station H. 

Next, a step SB03 of receiving a result nnakes it possible to receive a 
response A sent by the server station H at the end of the method of undoing 
5 operations as described above with reference to Figure 3 and the subsequent 
Figures. 

A test S804 enables it to be verified whether there existe a bill of 
exchange in the table 14 of the client station U corresponding to the server 
station H. The storage of such a bill of exchange will be descrit>ed later with 
1 0 reference to Figure 9. 

If not an information step S815 enables the user to be informed of 
this anomaly. 

If this bill of exchange exists, a test step S805 makes it possible to 
|j» verify that the response does indeed comprise, In a specific field, a sum of 

J3 15 money S corresponding to a reimbursement 

1^ As already described, when the client station Ua requests the 

undoing of a function for which rt has itself paid and required ttie remote 

fy execution, the sum to reimburse S corresponds to the sum of the payment Pa 

sent and of the cost Cf received by the server station for the execution of ttie 

r*; 20 function, from which is deducted an undo cost Ca- 

H if this client station Ua has not itself required the execution of the 

ifs function to be undone, the sum S to reimburse does not comprise the amount 

13 Cf received by tiie server station H for the execution of the function. 

nil 

If no reimbursement Is included in the response A, the procedure for 
26 processing the response is also interrupted. 

Otherwise, an extraction step S806 is implemented in order to read 
the amount stored, corresponding here to a coin W| and to its index i in the 
chain of coins generated at the server station H. 

From a reading of the bilJ of exchange in the table 14, ft is possible to 
30 obtain the value of the root coin Wq in a reading step S807. 

A vairdatron step S808 then makes it possible to verify the 
authenticity of tiie coin Wi. 
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In practice, the hash function h is applied recursively to this current 
coin Wit here i times; 

h{h(...h(Wi))) 

The value thus obtained is compared with the value of the root coin 

5 Wo- 

It is also possible, in order to accelerate this validation step &808, to 
apply tfie hash function h recursively i -j times, that is to say a number of times 
just sufficient to find a coin Wj, of index j less than the current index I, and 
already sent by the server for reimbursement of the execution of a function to 
10 be undone. 

If the value obtained is different, the procedure of processing the 
function execution request is interrupted. 

Verification of the retmbunsement by the client station U is a simple 
1;^ operation, consisting of applying a hash function. In particular. It is necessary 

p 15 neither to have recourse to a banlang organization for verification, nor to 
f} implement expensive cryptographic methods. 

p After validation of the coins received, it is verified in a test step S809 

[U whether the client station u having received the reimbursement is also the client 

f ij 

^ station having earlier required the execution of the funcflon. In practice, with 

|3 20 reference to the algorithm of Figure 3. it is verified whether the client station Ua 
m having required the undo is also the client station Up having required and paid 

lU for the execution of the function. It so, a step S810 of obtaining the cost c 

;fi associated with the execution of the function f applied to the object o is 

implemented. 

25 This step S810 of obtaining the cost is implemented as described 

below with reference to Figure 9. 

The= execution cost c can be included directly in the response sent by 
the server station. 

Othenvisa, a particular procedure can be implemented for obtaining 
30 this execution cost, as illustrated in Figure 9. 
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This procedure for obtaining the cost c of execution of the function f 
comprises first of all a test S91 for checking whether the interface associated 
with the object o is available on the client station U. 

In practicep it is checked whether a corresponding interface has 
already been stored in the cac^e memory 15 of the dient station U. 

If not, a step S92 is implemented to obtain this Interface from the 
server station H. 

The request to obtain an interface comprises the computer address 
of the Interface. 

When the server station H receives the interface obtainment request 
the server station extracts from this request the computer address referencing 
the requested interface. 

The server station can, from a table, find ttie requested interface and 
transmit it to the client station u, possibly after translation of this Interface into 
the communication language of the communication networtc. 

As described previously, this interface comprises one or more 
functions associated with the execution code for these functions. 

Each funcfSon is aiso associated with a cost of execution of this 

function. 

An example of an interface malting It possible to remotely manipulate 
an image is given below. 

This interface comprises three Unctions: 

- "ConvertToB&W", whose price is constant This function makes it 
possible to convert an image Into black and white; 

- **Rotate"» whose price depends on the size of the Image and the 
angle of rotation. The price is expressed in the form of an expression which the 
client station can evaluate: tfiis function makes it possible to change the 
orientation of an image; 

- "Flip", whose price depends on input arguments determined by the 
server station. The customer is not capable of making the price calculation 
itself; the price is for example available at the following computer address: 

http://oceania/web-obi/c!ass/lmaae>xml#fliD#price 
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This function makes It possible to apply a reflection to the Image. 
<interl^oe 

name="lmage" 

href=httD://QQeania/wf> bH3bi/claaR/|maq6 /> 
<attriblJtdS> 

<int names^wldth" prloe»"0.01 FF" /> 

<lnt name="helghr price="0.01 FF" /> 

<string name-'encodlng- /> 
</attributes> 
<functlons> 

<function name="cx)nvertToB&V\r price=''0.5 FF"> 
</function> 

<functlon name="rotate"> 
<arguments> 

<lnt name="angle" /> 
</arguments> 
<price> 

<currency name="FF" /> 
<value language="JavaScripr> 

function price (width, height, angle) { 
return wldth*height*angle; 

} 

</va[ue> 
</price> 
<;/fijnction> 

<function name="flip"> 
<prfce> 

<currency name="FF" /> 
<value /> 
</price> 
</function> 
</functions> 
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</interfece> 

After reception of the interfece» a storage step S93 enables the 
interfaoe to be stored for subsequent use In tlie cache memory 15 of the dient 
station U. 

A reading step S94 maked it possible to read in the interfaoe 
received the cost c associated with the function f which it is wished to undo. 

In a test step S95 it is verified whether the cost is an expression to be 

caiculated. 

If so, an evaluation step S96 enables the cost to be evaluated of the 
function to be executed from the expression received. 

Such is the case, for example, for the rotation function "rotate". 

Otherwise, it is diecked in a test step S97 whether the cost of the 
function is fixed. Such is the case for example with the transformation of an 
image into black and white. 

Otherwise an obtaining step 898 is implemented in order to request 
the cost of the ilinction from the server station. Such is the case here with the 
reflection function "flip". 

There is thus obtained, at the end of step S810 In Figure 8, the cost c 
associated with the function f which it is wished to undo- 
Next, a reading step S81 1 enables the Index j to be read of the last 
coin received, and a test step S812 checks whether the number of coins 
received i ~ j is very different from the cost c of the function to be undone. 

In practice, the following Inequality is verified at the test step S812: 

1-J «c 

where c is the cost associated with the function f, 
i is the index of the current coin, and 
j is the index of the last coin received by the client station Uv 
If the reimbursement included in the response is not suffident, the 
procedure for processing this response is interrupted and the anomaly is 
indicated to the user at the information step S815. 

Otherwise a storage step 8813 enables the new Index i to be stored 
as the index J of the last coin received. 
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If at the end of the test step S809, the client station Ua having 
received the reimbursement is not the client station Up having paid for and 
required the execution of the function, the storage step S813 can be directiy 
implemented. 

Aitematlveiy, the verification steps S810 to S812 can aleo be 
Implemented by that dlent station Ua. 

An adding step S814 then mai<ed it possible to store the taken coin 
W) associated with its index i in an electronic purse of the client station U. 

Periodically, each dient station U can retransmit to the banking 
organization the values Wj associated with each index i, stored in the electronic 
purse, in order to recover the monetary value. 

Alternatively, at the adding step S814, a pre-paid card or a PC-card, 
such as disclosed In Figures 4 and 6 of the US patent No. 5 937 395, can be 
used as an electronic purse of the client station U. 

A description will now be given, with reference to Figure 10. of the 
procedure for processing a bill of exchange received by a client station U on 
reception of a first reimbursement sent by the server station H. 

After reception of this bill of exchange, an obtaining step S101 
enables the client station U to obtain from a certification organization the public 
key of the banl^ PKb corresponding to the signature procedure used by the 

As described previously, a step S102 of verifying the bank certificate 
C(PKe) can be Implemented using the bank public key PKt in order to verify the 
signature. 

At the end of a test step S103, if this signature is not valid, the 
procedure is interrupted. 

Otherwise a reading step S104 is implemented in order to read the 
public key of the server S^tion PKe. in a step S105 this public key PKe makes it 
possible to verify the signature of tiie bill of exchange C(Wo) received by the 
client station. 

At the end of a test step S10e, if this signature is not valid, the 
procedure is interrupted. 
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Othenmse a reading step S107 is Implennented in order to know the 
Identity of the server station H. 

A storage step SI 08 then enables the t»ll of exchange to be stored In 
the bill of exchange table 14 of the client station U. 

In practice, each server station Identifier H is stored in association 
wfth the certficate of authenticity or bill of exchange C(Wo). and more 
spedflcally with the value of the root coin Wq. 

This bill of exchange thus enables the client station U to authenticate 
the coins received from the server station H and to validate ihe reimbursement 
sum S received. 

Once this step has been executed, the reimbursement is considered 
to be accomplished. 

By virtue of this generation of electronic money on the server station 
H, the latter does not send the client its own coins, which cannot be 
Implemented reliably, but on the contrary uses a separate set of electronic coins 
as described previously. 

The reimbursement mechanism described In this embodiment is 
implemented in a manner symmetrical with the mechanism implemented for 
remunerating the function executed on the server station. 

Naturally, many modifications can be made to the example 
description described above without departing from the scope of the invention. 

Thus, in the embodiment described above, an undo cost is bome 
both by the client station Ua having required the undoing of the function and by 
the client station Up having required the execution of the function eariler. 

Naturally, the undo cost could be charged only to the client station Ua 
having required the undoing of the function. 

The server station could also propose to re-do the undone functions. 
In this case, the cost of executing a function again could be equal either. 

- to the amount reimbursed at the time of the undoing of the 

function; 

- to the initial cost of execution of the function; or 
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- to a different cost, between the amount reimbursed at the lime of 
the undoing and the initial cost of execution such that a new execution of an 
undone function would cost less than the initial execution of the function. This 
could be justified where the server station has kept in memory the result of the 
execution of the function after being undone. 



